This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/9/46EF3896348D5F15EAE53B1980903A18328E4126.mft
File:                     46EF3896348D5F15EAE53B1980903A18328E4126.mft (raw, json)
Hash identifier:          zaS18GCSJ3MSslggKWVEu/BoC7xdzjFNMip1b+koJy8=
Subject key identifier:   43:15:50:AF:58:0F:EC:E8:B9:C7:54:1C:CA:56:11:24:83:B1:E7:71
Authority key identifier: 46:EF:38:96:34:8D:5F:15:EA:E5:3B:19:80:90:3A:18:32:8E:41:26
Certificate issuer:       /CN=46EF3896348D5F15EAE53B1980903A18328E4126
Certificate serial:       3E43B0257DE6CF429DB43CB2CF079157B84828DC
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/46EF3896348D5F15EAE53B1980903A18328E4126.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/9/46EF3896348D5F15EAE53B1980903A18328E4126.mft
Manifest number:          0121
Signing time:             Sun 25 Jan 2026 18:00:01 +0000
Manifest this update:     Sun 25 Jan 2026 17:55:01 +0000
Manifest next update:     Mon 26 Jan 2026 21:58:01 +0000
Files and hashes:         1: 326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa (hash: oiy30LDb7vTdVDftfrDltIplyhMOoStMOIgMHNj+sTc=)
                          2: 46EF3896348D5F15EAE53B1980903A18328E4126.crl (hash: WIzhS1CQnhyui/dE2/gdGOK7uXgdECO5rl8z7f44L8I=)
                          3: 326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa (hash: 6ND8wDi/Ae2QJCAFqNwb9p7utV06LRSlH0HvemX13Fg=)
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/9/46EF3896348D5F15EAE53B1980903A18328E4126.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/9/46EF3896348D5F15EAE53B1980903A18328E4126.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/46EF3896348D5F15EAE53B1980903A18328E4126.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 03:56:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:43:b0:25:7d:e6:cf:42:9d:b4:3c:b2:cf:07:91:57:b8:48:28:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46EF3896348D5F15EAE53B1980903A18328E4126
        Validity
            Not Before: Jan 25 17:55:01 2026 GMT
            Not After : Jan 26 21:58:01 2026 GMT
        Subject: CN=431550AF580FECE8B9C7541CCA56112483B1E771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ff:46:27:9f:0f:5f:c3:b5:ff:e2:91:34:b0:
                    04:60:87:3d:fb:30:76:91:04:4c:89:63:cf:df:ca:
                    e8:a4:fe:ad:23:86:bd:fd:c9:59:d8:b5:db:c4:ca:
                    bc:0e:9f:75:88:51:a1:88:c2:0f:cb:7d:1c:81:bc:
                    32:3a:54:49:e0:f4:de:d1:db:1e:15:de:1d:08:d0:
                    32:30:84:ec:80:f6:a6:cc:c1:17:e4:22:b0:33:4e:
                    0c:ac:0a:38:46:23:7b:44:41:a5:3c:a4:97:d8:d0:
                    31:bc:52:e0:85:66:3e:c7:60:c3:d8:31:f9:52:14:
                    b8:2d:7a:4b:ea:fd:6a:76:20:90:e2:c5:4c:62:bc:
                    52:ce:06:1b:d6:11:63:c3:55:f5:45:28:85:75:ac:
                    32:c8:b0:1b:b3:04:3d:e1:ec:f9:c2:32:d2:7f:28:
                    c3:26:6c:e6:7b:c4:9e:c4:e7:a6:9e:46:a9:15:50:
                    d2:e0:3d:c6:89:85:b3:a3:3c:c3:82:fb:1d:e6:f9:
                    20:31:fe:75:bd:46:fc:60:9b:58:b3:26:3a:ff:1a:
                    c8:07:06:ca:a7:40:25:01:07:99:83:5a:4e:a6:76:
                    6e:9c:a5:04:ec:5a:ee:67:0a:30:c9:96:78:56:b6:
                    74:04:1a:d0:4a:62:94:cb:c0:ee:6b:00:b4:80:f4:
                    18:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:15:50:AF:58:0F:EC:E8:B9:C7:54:1C:CA:56:11:24:83:B1:E7:71
            X509v3 Authority Key Identifier:
                keyid:46:EF:38:96:34:8D:5F:15:EA:E5:3B:19:80:90:3A:18:32:8E:41:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/9/46EF3896348D5F15EAE53B1980903A18328E4126.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/46EF3896348D5F15EAE53B1980903A18328E4126.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/9/46EF3896348D5F15EAE53B1980903A18328E4126.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:f4:73:08:e0:d7:38:b7:d1:51:a1:4e:ae:31:17:13:7f:7a:
         74:88:c7:20:1f:f8:26:e7:cc:8b:67:37:eb:fe:a8:6a:49:7a:
         f9:65:77:76:38:b1:e5:c6:5c:c9:e6:e3:fd:68:50:c7:f1:1a:
         37:e5:6c:07:e3:f6:44:00:07:b9:a8:ae:ff:4f:54:0c:94:af:
         50:d8:68:6f:82:97:a8:1c:86:96:2e:0e:b5:a1:ae:a7:06:29:
         ba:12:59:6d:fb:81:63:c0:54:3c:96:63:72:f7:bb:90:56:9e:
         0e:94:bc:43:8c:7b:bb:1f:3e:1a:07:1d:7f:fc:c5:51:ac:b5:
         f0:fe:b4:0a:a9:22:45:da:64:3a:0b:f8:d1:6d:cd:50:43:9a:
         e8:dc:b1:68:5c:a1:1d:0d:89:92:a3:d8:18:46:54:fc:b0:0e:
         5c:83:39:4e:73:60:a9:02:bc:32:24:21:1b:aa:ed:b7:84:6e:
         05:9c:ae:39:22:6d:b2:21:25:04:a9:d0:0c:50:55:18:07:08:
         b1:d9:52:c7:65:8a:12:d0:27:8c:0a:c3:d0:f6:5a:37:2f:e3:
         1e:d8:41:33:59:ec:62:7b:83:95:21:e9:d2:5e:7f:1c:ff:56:
         78:72:e6:2c:26:af:c8:1e:e4:45:c7:eb:23:69:91:ed:b3:48:
         96:05:25:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:09:01 2026 by rpki-client